The Official Blog for Minnesota Association of REALTORS®

Minnesota Law – Q: What do I do if my company has had a data security breach?

A: MN Statute 325E.61 requires a business to provide notice to any person or business of that person or business’ personal information has been acquired by an unauthorized person and the data security has been breached.

It is recommended that you discuss this with your attorneys so that you can craft a notice which might include items such as:

a description of what happened;

the type of protected data involved;

what actions are being done to protect data from further unauthorized access;

what the company will do to assist affected persons;

the contact information for the company’s inquiry response system; and